Getting Data In

Splunk log management

singhba1
New Member

I know splunk manages its own internal logs and there is log.cf and local-log.cfg. I am wondering can we manage log files we monitor e.g /var/log/mylog.log via splunk inbuilt log management. I mean just adding entries in local-log.cfg ?

thanks a lot

Labels (1)
0 Karma

singhba1
New Member
Example here:

appender.A1=RollingFileAppender appender.A1.fileName=/var/log/mylog.log appender.A1.maxFileSize=250000000 appender.A1.maxBackupIndex=5 appender.A1.layout=PatternLayout appender.A1.layout.ConversionPattern=%d{%m-%d-%Y %H:%M:%S.%l} %-5p %c - %m%n
0 Karma
Get Updates on the Splunk Community!

Monitoring Postgres with OpenTelemetry

Behind every business-critical application, you’ll find databases. These behind-the-scenes stores power ...

Mastering Synthetic Browser Testing: Pro Tips to Keep Your Web App Running Smoothly

To start, if you're new to synthetic monitoring, I recommend exploring this synthetic monitoring overview. In ...

Splunk Edge Processor | Popular Use Cases to Get Started with Edge Processor

Splunk Edge Processor offers more efficient, flexible data transformation – helping you reduce noise, control ...